Privacy Policy

1. The short version

• We collect what we need to run your account and make your films: your email, your projects, your uploads and the takes made for you.
• We do not sell or share your personal information for advertising, and there are no advertising or analytics trackers on the site.
• We do not train AI models on your work. Your prompts and references are sent to the AI model makers that produce your takes, only to produce them.
• We never store your IP address in our database. We keep the rough city and country of each sign-in so you can spot one that was not you.
• You can download everything, correct it, or delete your account yourself, from Account > Privacy & data.

2. Who we are

AIMoovieStudios is operated by [COMPANY LEGAL NAME, e.g. Example Studios LLC] ([ENTITY TYPE AND STATE, e.g. a Delaware limited liability company]), doing business as AIMoovieStudios, [STREET ADDRESS, CITY, STATE ZIP, UNITED STATES]. We decide how and why your personal information is processed, which makes us the “controller” (or “business”) under privacy laws. Contact us at privacy@aimooviestudios.com.

Our representative in the European Union: [EU REPRESENTATIVE NAME AND ADDRESS, or leave empty if not required].

Our representative in the United Kingdom: [UK REPRESENTATIVE NAME AND ADDRESS, or leave empty if not required].

When you are a collaborator on someone else's project, that project's content belongs to its owner; we process it for them and for you under this policy.

3. What we collect

What you give us

• Account: your email address, display name and password. We store the password only as a one-way bcrypt hash, never the password itself.
• Profile (optional): a handle, profile picture, short bio, links, and whether your profile is public.
• Your content: projects, scripts, story documents, characters (which may describe or depict real people), locations, scenes and shots, prompts, notes, messages to our AI agents and to collaborators, pictures and video clips you upload (which may show people's faces or contain their voices), and the pictures, clips, voices, sound and films generated for you.
• Collaboration: the email address of anyone you invite to a project, and the role you give them.
• Settings: your studio preferences, Guided or Pro mode, notification choices, privacy choices, low-balance and top-up settings.
• Agreements: when you accepted the Terms, which versions of the Terms and this policy you saw, when you confirmed your age, and whether you asked for product emails.
• Payments: when payments are on, Stripe collects your card and billing details directly on its own page. We receive and keep a Stripe customer reference, your plan and its status, and invoice records (description, amount, currency, status, and links to Stripe's copy). We never receive your full card number.
• Messages to us: what you send to support or with a privacy request.

What we record automatically

• Sign-in and security: each session's start, expiry and last-seen time, your browser's user-agent string (which says the browser and operating system), and the approximate city and country of the connection. We also keep a history of sign-in attempts and security changes: whether it worked, the method (password, authenticator code, backup code), a short reason for a failure, the email address typed, the user agent, and city and country. We never record the password or code typed.
• Location is coarse only. City and country come from our host's network headers. We do not collect precise location.
• IP addresses: we do not store your IP address in our database. When you sign up, we store a keyed, one-way code derived from it (an HMAC) so we can limit how many accounts are created from one network; the address cannot be read back from it without our server key. Our hosting provider, Vercel, necessarily sees your IP address to deliver the site and may keep it briefly in its logs.
• Usage and billing records: your credit ledger (purchases, grants, amounts set aside, charged and returned), the generation jobs you ran with their settings, model, status and cost, the AI agent calls made for you (which agent, what for, model, token counts and credits), and an activity log of actions in your projects.
• On your device: a few cookies and browser-storage entries that keep you signed in and remember interface choices. See the Cookie Notice.

What we get from others

• A project owner who invites you gives us your email address.
• Stripe tells us whether a payment succeeded, failed, was refunded or disputed, and the state of your subscription.
• AI model makers return the takes they generate and tell us when their safety filters refuse a request.

What we do not collect

No advertising identifiers, no contacts or address books, no precise location, and no tracking pixels or analytics scripts. We do not buy data about you.

4. Faces, voices and sensitive information

Pictures and recordings of people can be sensitive. We use them only to make the takes you ask for: they are stored in our private storage and sent to the model makers that generate your takes, and our review agents compare a take with your reference pictures to check that a character looks consistent from shot to shot.

We do not use faces or voices to identify anyone, and we do not create face templates, voiceprints or other biometric identifiers for identification. Before you upload a real person's likeness, you must have their permission (see the Terms of Service).

Your account password is sensitive under some laws. We use it only to sign you in. We do not infer characteristics about you from your content, and we ask you not to put health, financial or other sensitive details about yourself or others in projects unless the film truly needs them.

5. How we use it, and our legal bases

The legal basis column matters mainly if you are in the European Economic Area or the United Kingdom.

Where we rely on legitimate interests, we have weighed them against your rights; you can object (see Your Privacy Choices).

6. AI processing and training

To make a take, we send the prompt, settings, and any reference pictures, frames or clips for that shot to the model maker (sometimes through a generation service that routes to it). To plan and check your film, our agents send project text and, when they need to look, pictures and clips (including their sound) to our AI providers. The full list is on the Subprocessors page.

We do not use your content to train AI models, and your account's “Never use my work to train models” setting is on by default. If we ever wanted to change this, we would update this policy first and use only content from people who chose to allow it. How the providers handle your inputs is described in the AI Disclosure.

We do not use AI to make decisions about you that have legal or similarly significant effects. Automated checks can flag a take for review; a model maker's safety filter may refuse a request.

7. Who we share it with

• Service providers who process data for us under contract: hosting, database and storage, AI model makers and generation services, payments and email. Each is listed, with what it receives, on the Subprocessors page.
• People you choose: collaborators on your projects; anyone with a share link to your film; everyone, for your public profile, if you turn it on.
• For legal reasons: when we believe in good faith that the law requires it (for example a valid subpoena or court order), to report child sexual abuse material to the National Center for Missing & Exploited Children, or to protect the rights, safety or property of people depicted, our users, the public or us.
• In a business transfer: if we are involved in a merger, acquisition, financing or sale of assets, under confidentiality and with this policy continuing to apply to your data. We will tell you before your data becomes subject to a different policy.

8. Cookies and similar technology

We use only what the site needs: a sign-in cookie, a five-minute cookie during two-step sign-in, a cookie that remembers Guided or Pro mode, and a few browser-storage entries such as “tour finished”. No advertising or analytics cookies. Details are in the Cookie Notice.

9. How long we keep it

When you delete your account

1. You ask to delete it on the Security page. We sign you out everywhere straight away and stop showing your public profile. Share links to your films keep working until the films are erased, so delete a film first if you want its link to stop at once.
2. For 30 days you can change your mind by signing in, and everything comes back.
3. After 30 days the account is closed and can no longer be signed in to. Within a further [NUMBER OF DAYS, e.g. 30 days] we erase or anonymize your profile, projects, uploads, takes and films.
4. We keep only what we must: payment, invoice and ledger records for the period above, records needed to handle a legal claim or dispute, and information about accounts closed for serious violations, to stop them coming back.

Model makers and generation services keep inputs and outputs on their own schedules, described in their policies; many keep generated files for only a short time, which is why we copy every take into our own storage.

10. How we protect it

• Passwords are hashed with bcrypt, and at least 12 characters are required. Repeated failed sign-ins are slowed down.
• Optional two-step sign-in with an authenticator app. The authenticator secret is encrypted with AES-256-GCM; backup codes are stored only as hashes.
• Session cookies are HTTP-only and sent only over HTTPS in production. We store only a hash of each session token, API key, invite code, promo code and email-link token, so a copy of our database would not give anyone working credentials.
• Uploads and generated files sit in private storage and are reached only through short-lived signed links. Uploaded files are checked by their content, not their name.
• Share links are signed so they cannot be guessed.
• Traffic is encrypted in transit (HTTPS). Our database and storage provider encrypts data at rest.
• Access to production systems is limited to the people who need it to run the service.

11. Your rights and choices

You can do most things yourself, straight away:

• See and download your data: Account > Privacy & data, “Download my data”.
• Correct it: Account > Profile and Security (email and password).
• Delete it: Account > Security > Delete account.
• Stop emails: Account > Notifications. Security and billing emails about your account cannot be switched off while it is open.
• Control visibility: private-by-default, public profile and training settings on the Privacy & data and Profile pages.

Depending on where you live, you also have legal rights to know, access, correct, delete, port, restrict or object to processing, to opt out, and to appeal our decision. Your Privacy Choices explains each one and has a request form. We will not treat you differently for using them.

12. International transfers

We are based in the United States and our main systems are hosted in [SUPABASE PROJECT REGION, e.g. United States (East)]. Some model makers and generation services process data in other countries, as listed on the Subprocessors page. When we transfer personal data from the European Economic Area, the United Kingdom or Switzerland, we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum), on a provider's certification under the EU-U.S. Data Privacy Framework and its UK and Swiss extensions where it has one, or on another lawful mechanism. You can ask us for a copy of the relevant safeguards.

13. Children

The service is only for people 18 and older. We do not knowingly collect personal information from anyone under 18, and we forbid uploading or generating the likeness of real minors. If you believe a child has given us information, or appears in content on the service, write to privacy@aimooviestudios.com and we will delete it.

14. United States: state privacy rights

California (CCPA as amended by the CPRA)

In the last 12 months we collected the following categories of personal information, from the sources and for the purposes described above:

We do not sell or share (for cross-context behavioral advertising) any category, including those of people under 16. We use sensitive personal information only for purposes the law permits without a right to limit, such as providing the service and keeping accounts secure. We keep each category for the periods in the retention section.

Your rights: to know what we collect and how we use and disclose it; to access and get a portable copy; to correct; to delete; to opt out of sale or sharing; to limit use of sensitive personal information; and not to be discriminated against for using these rights. You can use an authorized agent. See Your Privacy Choices for how. California's “Shine the Light” law: we do not disclose personal information to third parties for their direct marketing.

Other U.S. states

Residents of states with comprehensive privacy laws, including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, New Hampshire, New Jersey, Nebraska, Tennessee, Minnesota, Maryland, Indiana, Kentucky and Rhode Island, may have rights to confirm whether we process their data, to access, correct, delete and port it, and to opt out of targeted advertising, sale and certain profiling. We do not sell personal data, do not use it for targeted advertising, and do not profile people in ways that produce legal or similarly significant effects, but you can still ask us to confirm this. If we decline your request, you can appeal by replying to our decision or writing to privacy@aimooviestudios.com; if we deny the appeal, you may contact your state attorney general.

Nevada residents: we do not sell covered information as defined by Nevada law.

15. European Economic Area, UK and Switzerland

You have the right to access your personal data, to rectify it, to erase it, to restrict or object to its processing, to data portability, and to withdraw consent at any time (without affecting earlier processing). You also have the right to lodge a complaint with a supervisory authority, in particular in the country where you live or work, or where you think the law was broken. In the UK, that is the Information Commissioner's Office.

Providing your email and password is necessary to create an account; without them we cannot provide the service. Everything else is optional or generated by your use of the service.

16. Changes to this policy

We will update this policy when our practices change, for example when we add a service provider. Material changes will be announced by email or in the studio before they take effect. The date and version at the top of this page always show the current version.

17. Contact

Privacy questions and requests: privacy@aimooviestudios.com, or by post to [COMPANY LEGAL NAME, e.g. Example Studios LLC], Attn: Privacy, [STREET ADDRESS, CITY, STATE ZIP, UNITED STATES].